GitHub Teams

Spinnaker supports using GitHub teams for authorization. Roles from GitHub are mapped to the Teams under a specific GitHub organization.

Personal Access Token

  1. Under an administrator’s account, generate a new Personal Access Token from https://github.com/settings/tokens .

  2. Give it a descriptive name such as “spinnaker-fiat.”

  3. Select the read:org scope.

  4. Click “Generate Token”

    GitHub personal access token

Configure with Halyard

With the personal access token in hand, use Halyard to configure Fiat:

  1. TOKEN=b22a54...  # Personal access token under admin account
  2. ORG=myorg        # GitHub Organization
  4. hal config security authz github edit \
  5.     --accessToken $TOKEN \
  6.     --organization $ORG \
  7.     --baseUrl https://api.github.com
  9. hal config security authz edit --type github
  11. hal config security authz enable

Last modified August 28, 2020: fix ordering to match current site (4ca0bf9)